high7.3
CVE-2016-4385
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitra…
Impact
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Network Automation | Versions 9.10, 9.20, 9.22, 9.22.01, 9.22.02, 10.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/93109
- http://www.zerodayinitiative.com/advisories/ZDI-16-523/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098
- https://www.tenable.com/security/research/tra-2016-27
- http://www.securityfocus.com/bid/93109
- http://www.zerodayinitiative.com/advisories/ZDI-16-523/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098
- https://www.tenable.com/security/research/tra-2016-27